Threat Intelligence

IOC (Indicator of Compromise)

An Indicator of Compromise (IOC) is forensic evidence suggesting a security breach or malicious activity has occurred. Common IOCs include suspicious IP addresses, malicious domain names, unusual file hashes, registry modifications, and anomalous network traffic patterns. Security teams and investigators use IOCs to detect threats, scope incidents, and attribute attacks to specific threat actors.